IT Security Analyst- Remote

Contract Length: 7 Months

Potential Extension: Yes

Pay Rate
: $50-$60 hourly W2

We are seeking an experienced Information Security Advisor to join a growing security advisory team that supports enterprise-wide technology initiatives. This role focuses on providing security guidance, risk assessments, threat modeling, and security architecture recommendations across a diverse technology landscape that includes on-premises, cloud, hybrid, and SaaS environments.

This is an excellent opportunity to work on large-scale transformation initiatives, including cloud adoption and modernization efforts, while partnering with business and technology teams to ensure security is embedded throughout the project lifecycle.

• Provide security guidance during the planning, design, development, and implementation of technology solutions.
• Conduct Threat Risk Assessments (TRAs) and threat modeling activities for applications, infrastructure, cloud platforms, and enterprise initiatives.
• Review and assess security controls to ensure alignment with organizational standards and regulatory requirements.
• Perform security advisory reviews for complex applications, platforms, and network environments.
• Analyze security risks and recommend mitigation strategies.
• Support cloud initiatives by providing quality assurance reviews of threat assessments and security architecture designs.
• Collaborate with technology, infrastructure, development, and business teams to implement secure-by-design principles.
• Evaluate existing security solutions and recommend enhancements to address emerging threats and evolving business needs.
• Review vulnerability reports, validate security controls, and assess remediation plans.
• Provide guidance on security policies, standards, and best practices.
• Support security posture reviews and ensure appropriate security controls are implemented and maintained.
• Conduct industry research and benchmarking to identify emerging threats, trends, and mitigation strategies.
• Build strong relationships with business stakeholders and provide ongoing security consultation.

• 5+ years of hands-on experience performing security assessments for applications, infrastructure, and network environments.
• 3+ years of experience conducting Threat Risk Assessments and threat modeling across on-premises, cloud, hybrid, and SaaS environments.
• 2+ years of experience in security architecture, security engineering, software development, or hands-on implementation of security solutions.
• 3+ years of experience reviewing vulnerability reports, validating control effectiveness, and assessing server hardening requirements.
• Strong understanding of U.S. regulatory requirements and security compliance practices.
• Experience identifying security risks and providing practical remediation recommendations.
• Strong knowledge of application security controls, compensating controls, and security best practices.

• Experience with Service Now.
• Knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
• Security certifications such as CISSP, CISM, CCSP, CRISC, or similar.
• Familiarity with security frameworks and standards including:
  • NIST 800-53
  • ISO 27001 / ISO 27002
  • ISO 27017 / ISO 27018
  • PCI DSS
  • CIS Controls

• Excellent verbal and written communication skills.
• Ability to communicate complex security concepts to technical and non-technical audiences.
• Strong documentation and presentation skills.
• Ability to work independently while managing multiple priorities.
• Strong stakeholder management and relationship-building capabilities.

• Bachelor's degree in Computer Science, Information Security, Information Technology, Cybersecurity, or a related field.
• Equiv…